Privacy and Cookie Policy

Effective date: 01/09/2025

Last updated: 17/08/2026

1. Who we are

Xyto Taxology Limited (“Xyto”, “we”, “us” or “our”) provides online courses, educational resources, events and an online community relating to Tax Technology & Transformation.

Xyto Taxology Limited

Company number: 09556613

8 Thistle Walk, High Wycombe, Buckinghamshire, HP11 1GZ, United Kingdom

Email: service@xytotaxology.com

Telephone: +44 7799 821367

Website: www.xytotaxology.com

For the purposes of applicable data-protection law, Xyto is generally the controller of the personal information described in this policy.

2. What this policy covers

This policy explains how we collect and use personal information when you:

visit our website;
contact us or submit a form;
purchase or enrol in a course, program or membership;
participate in our community, events or discussions;
receive communications from us; or
otherwise use our online services.

Where we provide separate professional tax, consulting or advisory services, additional terms may apply.

3. What information we collect

Depending on how you interact with us, we may collect:

Contact and account information

Your name, email address, telephone number, country, business or employer, job title, username and account information.

Purchase and payment information

Details of courses or services purchased, transaction dates, amounts paid, billing information, payment status and invoices.

Payments are processed through our payment provider, currently Kajabi Payments. We do not generally receive or store your complete payment-card details.

Course and community information

Your course enrolments and progress, assessments, certificates, event registrations, community profile, posts, comments, messages and other information you choose to submit.

Communications

Information contained in enquiries, emails, support requests, surveys and feedback.

Marketing preferences

Whether you have agreed to receive marketing communications and whether you have unsubscribed.

Technical information

Information collected when you use our website or learning platform, such as your IP address, browser and device type, pages viewed, login activity and information collected through cookies and similar technologies.

Information provided by others

If an employer, sponsor or other organisation registers you for a course or service, we may receive relevant information from that organisation, such as your name and contact details.

4. How we use your information

We use personal information to:

process purchases and enrolments;
provide courses, memberships, events and other services;
create and manage accounts;
provide customer support;
communicate with you about your purchases and services;
issue certificates or confirmations;
administer payments and financial records;
operate, secure and improve our website and services;
understand how our courses and services are used;
manage our community and prevent misuse;
meet legal, tax, accounting and regulatory requirements; and
send marketing communications where permitted and where you have provided the required consent.

Our lawful bases

Depending on the purpose, we generally rely on one or more of the following lawful bases:

Contract – where we need your information to provide a course, membership, event or other service you have purchased.

Legal obligation – where we need to keep or use information to comply with legal, tax, accounting or regulatory requirements.

Legitimate interests – where necessary to operate, secure and improve our business and services, provided your rights and interests do not override those interests.

Consent – where the law requires consent, including for certain marketing activities and non-essential cookies.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that took place lawfully before consent was withdrawn.

5. Marketing

We may send information about our courses, events, services and related educational material where permitted by law.

You can unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us.

Unsubscribing from marketing will not stop necessary communications relating to your account, purchases, payments or services.

We do not sell or rent our customer or email lists to third parties for their own marketing purposes.

6. Who we share your information with

We may share personal information with organisations that help us operate and provide our services, including:

Kajabi, which hosts our website, courses and community;
payment processors;
email and communication providers;
video-conferencing and event platforms;
analytics and cookie-management providers;
professional advisers such as accountants and lawyers; and
contractors who provide administrative, technical or course-support services.

We may also disclose information where required by law, for example to government authorities, regulators or courts.

If Xyto is involved in a sale, merger, restructuring or transfer of the business, personal information may also be transferred as part of that transaction, subject to appropriate protections.

7. International transfers

Some of our service providers operate outside the United Kingdom. Your personal information may therefore be processed in other countries, including the United States.

Where required by data-protection law, we use appropriate safeguards for international transfers, such as recognised contractual or other legal transfer mechanisms.

8. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

This may include keeping information for:

as long as you have an active account or access to a course or service;
longer where necessary for tax, accounting or legal requirements;
as long as reasonably necessary to deal with enquiries, support requests or disputes; and
as long as necessary to maintain marketing suppression records after you unsubscribe.

We may retain information for longer where reasonably necessary to establish, exercise or defend legal claims.

9. Cookies

Our website and learning platform use cookies and similar technologies.

Some cookies are necessary for the website or services to function, including security, account access and checkout.

Other cookies may be used for:

remembering preferences;
understanding how visitors use our website;
improving our services; and
measuring marketing or advertising performance.

Where required by law, we will ask for your consent before using non-essential cookies.

The cookies we use may change when we update our website, Kajabi or other services. Our cookie settings will provide the most current information about the cookies and similar technologies we use.

10. Keeping your information secure

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

No online system can be guaranteed to be completely secure.

You should keep your account password confidential and contact us if you believe your account has been accessed without permission.

Please do not send highly confidential tax, identity, banking or payment information through ordinary email or shared community areas unless we have provided an appropriate secure method.

11. Your privacy rights

Depending on the law that applies to you, you may have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct inaccurate information;
ask us to delete information in certain circumstances;
ask us to restrict how we use your information;
object to certain types of processing;
receive certain information in a portable format;
withdraw consent where we rely on consent; and
complain to a data-protection or supervisory authority.

These rights are not absolute and may be limited in certain circumstances, including where we are required to retain information by law.

To exercise a privacy right, contact:

service@xytotaxology.com

We may need to verify your identity before dealing with your request.

12. Children

Our courses, services and community are intended for adults aged 18 and over unless a particular program expressly states otherwise.

We do not knowingly collect personal information from children where parental or guardian consent is legally required.

If you believe a child has provided personal information to us improperly, please contact us.

13. Automated decision-making

We do not currently use personal information to make decisions based solely on automated processing that have legal or similarly significant effects.

14. External websites

Our website, courses and community may contain links to external websites or services.

We are not responsible for the privacy practices of those third parties. You should review their privacy policies before providing personal information to them.

15. Changes to this policy

We may update this policy when our services, technology, providers or legal obligations change.

The latest version will be published on our website with the updated date.

If a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected users.

16. Contact and complaints

If you have a question, privacy request or complaint about how we use your personal information, please contact us first: